Data Breach Today

DECEMBER 27, 2023

Attacks Exposed Millions of Records, Severely Disrupted Care and More Hacks on healthcare sector entities reached record levels in 2023 in terms of data breaches.

Data breaches 300

Data breaches 300

Krebs on Security

DECEMBER 12, 2023

The final Patch Tuesday of 2023 is upon us, with Microsoft Corp. Among the critical bugs quashed this month is CVE-2023-35628 , a weakness present in Windows 10 and later versions, as well as Microsoft Server 2008 and later. For example, CVE-2023-35636 , which Microsoft says is an information disclosure vulnerability in Outlook.

IT 220

IT Security 220

Krebs on Security

OCTOBER 10, 2023

The patch fixes CVE-2023-42724 , which attackers have been using in targeted attacks to elevate their access on a local device. Apple said it also patched CVE-2023-5217 , which is not listed as a zero-day bug. ” Microsoft also patched zero-day bugs in Skype for Business ( CVE-2023-41763 ) and Wordpad ( CVE-2023-36563 ).

Libraries 228

Libraries Authentication Communications Cloud 228

Data Breach Today

NOVEMBER 28, 2023

CEO Adam Selipsky Unveils AI Assistant, Projects With Salesforce, NVIDIA, Anthropic In an effort to upstage Microsoft in the AI space, AWS CEO Adam Selipsky invited NVIDIA CEO Jensen Huang and Dario Amodei, co-founder of Anthropic, to share the stage at AWS re:Invent 2023.

Security 284

Security 284

Data Breach Today

JUNE 4, 2024

IBM, Rubrik, Palo Alto Networks and CrowdStrike entered the red-hot data security posture management market with nine-figure deals announced between May 2023 and March 2024. IBM, Rubrik, Palo Alto & CrowdStrike All Bought into DSPM. Will Tenable Join Them?

Security 263

Security Marketing IT 263

Security Affairs

MAY 22, 2024

The digital imaging products manufacturer OmniVision disclosed a data breach after the 2023 ransomware attack. In 2023, OmniVision employed 2,200 people and had an annual revenue of $1.4 In 2023, the imaging sensors manufacturer was the victim of a Cactus ransomware attack. ” reads the data Breach Notification.

Data breaches 98

Data breaches Ransomware Manufacturing Encryption 98

Krebs on Security

JUNE 13, 2023

” Top of the list on that front is CVE-2023-29357 , which is a “critical” bug in Microsoft SharePoint Server that can be exploited by an unauthenticated attacker on the same network. As always, please consider backing up your system or at least your important documents and data before applying system updates.

Systems administration 222

Systems administration Authentication Access Phishing 222

Krebs on Security

JANUARY 10, 2023

Highlights from the first Patch Tuesday of 2023 include a zero-day vulnerability in Windows, printer software flaws reported by the U.S. Of particular concern for organizations running Microsoft SharePoint Server is CVE-2023-21743. Microsoft says this flaw is “more likely to be exploited” at some point.

Encryption 246

Encryption Security Access IT 246

Data Breach Today

DECEMBER 14, 2023

Also: Changpeng Zhao to Remain in the US; Vulnerability in Bitcoin Core This week: 2023 hacking statistics, order for ex-Binance chief to stay in U.S., a $25M crypto AI scam indictment, a $2.7M

Security 273

Security 273

Krebs on Security

APRIL 11, 2023

On April 7, Apple issued emergency security updates to fix two weaknesses that are being actively exploited, including CVE-2023-28206 , which can be exploited by apps to seize control over a device. CVE-2023-28205 can be used by a malicious or hacked website to install code. Both vulnerabilities are addressed in iOS/iPadOS 16.4.1,

Ransomware 240

Ransomware Access Phishing Security 240

Krebs on Security

MAY 9, 2023

First up in May’s zero-day flaws is CVE-2023-29336 , which is an “elevation of privilege” weakness in Windows which has a low attack complexity, requires low privileges, and no user interaction. ” Adam Barnett , lead software engineer at Rapid7 , said CVE-2023-24932 deserves a considerably higher threat score.

Access 225

Access Ransomware Security IT 225

Krebs on Security

MARCH 15, 2023

The Outlook vulnerability ( CVE-2023-23397 ) affects all versions of Microsoft Outlook from 2013 to the newest. While CVE-2023-23397 is labeled as an “Elevation of Privilege” vulnerability, that label doesn’t accurately reflect its severity, said Kevin Breen , director of cyber threat research at Immersive Labs. .”

Passwords 241

Passwords Authentication Cloud Access 241

Data Breach Today

DECEMBER 8, 2023

Highlights From the Conference on Improving Public-Private Sector Collaboration In this special edition at Black Hat Europe 2023 in London, three ISMG editors cover the highlights of the conference, including a resounding call for better collaboration between government agencies and the private sector, regulatory trends, and the cautionary tale of (..)

Government 296

Government 296

Data Breach Today

OCTOBER 6, 2023

The biggest skills gaps are soft skills (55%), cloud computing (47%), security controls (35%), coding skills (30%) and software development (30%), according ISACA's State of Cybersecurity 2023 survey of more than 2,000 security leaders globally.

Security 284

Security Cloud Cybersecurity 284

Data Breach Today

DECEMBER 13, 2023

Jack Henry's Rene Perez on How to Tackle Check Fraud as Tactics Change Check fraud, scams and account takeovers dominated the fraud landscape in 2023.

IT 259

IT 259

Krebs on Security

JULY 11, 2023

They include CVE-2023-32049 , which is a hole in Windows SmartScreen that lets malware bypass security warning prompts; and CVE-2023-35311 allows attackers to bypass security features in Microsoft Outlook. CVE-2023-36874 is an elevation of privilege bug in the Windows Error Reporting Service.

Ransomware 211

Ransomware Security Phishing Authentication 211

Data Breach Today

APRIL 30, 2024

Data Breach Report Lead Author Alex Pinto Discusses Top Findings, Best Practices Verizon's 17th annual 2024 Data Breach Investigations Report highlights a troubling trend: The exploitation of vulnerabilities in the wild has tripled, primarily due to ransomware actors targeting zero-day vulnerabilities, such as the MOVEit flaw that triggered numerous (..)

Data breaches 283

Data breaches Ransomware 283

Data Breach Today

JUNE 16, 2023

Forrester's Brian Wrozek on Poison AI Data, Cloud Complexity, Nation-State Threats The potential for cybercriminals to reverse-engineer generative AI tools, the rise of geopolitical threats and increased cloud complexity are among the top new threats facing security teams in 2023, according to Forrester's Top Cybersecurity Threats In 2023 report.

Cloud 184

Cloud Cybersecurity Security 184

Thales Cloud Protection & Licensing

NOVEMBER 1, 2023

Thales Wins Big in 2023 madhav Thu, 11/02/2023 - 05:09 Here at Thales, we are incredibly proud of what we do. 2023 has been a particularly good year for us; keep reading for a run-through of our most recent successes. 2023 has been a particularly good year for us; keep reading for a run-through of our most recent successes.

Cloud 143

Cloud Cybersecurity Marketing Ransomware 143

Security Affairs

MARCH 7, 2024

The FBI Internet Crime Complaint Center (IC3) 2023 report states that reported cybercrime losses reached $12.5 billion in 2023. The 2023 Internet Crime Report published the FBI’s Internet Crime Complaint Center (IC3) reveals that reported cybercrime losses reached $12.5 billion in 2023. billion in 2023 (+38%).

Ransomware 101

Ransomware Data breaches Personal data Phishing 101

IT Governance

OCTOBER 24, 2023

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Publicly disclosed data breaches and cyber attacks City of Philadelphia discloses data breach after five months Date of breach: 24 May 2023 ( notice issued 20 October 2023).

Data Privacy 105

Data Privacy Privacy Security Data breaches 105

Data Breach Today

APRIL 24, 2023

Lee Shares 2023 Q1 Data Breach Report Highlights According to findings from the Identity Theft Resource Center's 2023 Q1 Data Breach Report, the number of publicly reported data compromises decreased, but the number of data breaches with no actionable information about the root cause of the compromise grew.

Data breaches 308

Data breaches 308

Data Breach Today

AUGUST 1, 2022

The company is spending historic mounts on buying raw materials on the open market and shipping those materials to the production line – an expense issue expected to stretch into 2023.

Marketing 315

Marketing 315

Data Breach Today

DECEMBER 1, 2023

The Incident Involves Ransomware Encryption and Follows Familiar, Concerning Trends A large, Seattle-based surgical group is notifying nearly 437,400 individuals that their information was potentially compromised in a ransomware and data theft incident earlier this year.

Ransomware 279

Ransomware Encryption 279

Security Affairs

NOVEMBER 1, 2023

Experts warn that threat actors started exploiting the critical flaw CVE-2023-46747 in F5 BIG-IP installs less than five days after PoC exploit disclosure. F5 this week warned customers about a critical security vulnerability, tracked as CVE-2023-46747 (CVSS 9.8), that impacts BIG-IP and could result in unauthenticated remote code execution.

Authentication 106

Authentication Access Cybersecurity Security 106

The Last Watchdog

DECEMBER 14, 2023

Last Watchdog posed two questions: •What should be my biggest takeaway from 2023, with respect to mitigating cyber risks at my organization? Cryptographic inventories need finalizing and quantum safe encryption needs to be adopted for sensitive communications and data. What should I be most concerned about – and focus on – in 2024?

Cybersecurity 234

Cybersecurity Encryption Marketing Risk 234

Data Breach Today

NOVEMBER 3, 2023

Exploit Goes Public But No Sign of Active Exploitation Atlassian added new urgency Thursday to a warning that customers with on-premises Confluence servers should patch immediately to protect against a vulnerability that attackers could exploit to destroy data.

263

263

Data Breach Today

APRIL 24, 2023

Emerging AI Tech, Identity Concerns and Latest Threats Are Among the Hot Topics ISMG editors are live at RSA Conference 2023 in San Francisco with an overview of opening-day speakers and hot topics including the emergence of AI, the latest intel on nation-state threats, security product innovation and deals, and ransomware trends.

Ransomware 215

Ransomware Security 215

Security Affairs

OCTOBER 4, 2023

The DRM Report Q2 2023 report provides a detailed insight into the ransomware threat landscape during the period between May and August 2023. Ransomware, a menace that has evolved into a formidable adversary, takes center stage in our examination of the cyber threat landscape during the second quarter of 2023.

Ransomware 101

Ransomware Data collection Cybersecurity Security 101

Security Affairs

JUNE 7, 2024

The campaign seems to have been active since at least October 2023, it initially targeted a limited number of customers/organizations but recently became widespread. Post-exploitation features include network port scanning and access to existing databases and server data. ” reads the analysis published by Akamai.

File names 83

File names Passwords Access Cloud 83

Data Breach Today

FEBRUARY 10, 2023

Contrast's Tom Kellermann on How Cybercriminals Escalated Destructive Strikes Banking Trojans, ransomware, fake finance apps programmed to steal data - the cybercriminal cartels have become more punitive in 2023, escalating destructive attacks on financial institutions.

Ransomware 167

Ransomware Security 167

Security Affairs

MARCH 13, 2024

Threat actors behind the ransomware attacks that hit Stanford University in 2023 gained access to 27,000 people. Stanford University confirmed that threat actors behind the September 2023 ransomware attack had access to 27,000 people. The Akira ransomware gang claimed the theft of 430 GB of data from the university’s systems.

Ransomware 102

Ransomware Data breaches Passwords Access 102

Data Protection Report

MARCH 6, 2023

The reform of Hong Kong’s Personal Data (Privacy) Ordinance (Cap.486) According to a recent briefing to the Legislative Council, the Privacy Commissioner for Personal Data (the PCPD ) reported that she is working closely with the government to comprehensively review the PDPO to formulate concrete proposals for legislative amendments.

Data Privacy 136

Data Privacy Privacy Paper Personal data 136